block shuffle

attention heatmap (1) input transformation (1) adversarial example (1) adversarial transferability (1) adversarial perturbation (1) deep neural network (1) black-box attack (1) adversarial attack (1) neural network optimization (1) image classification (1)